Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/93572255-5953-3325-8521-35f18631a9ce.roa
File:                     93572255-5953-3325-8521-35f18631a9ce.roa (raw, json)
Hash identifier:          h09WUFwkF1Yw86kTS/owx908g1ntOMolYeiOgEZzFfQ=
Subject key identifier:   5F:19:B7:22:60:D1:8D:2B:F2:DA:1A:12:DC:9B:B2:A0:1A:61:BA:D6
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F432858478026734A5F2EDC97DAFBBCC0
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/93572255-5953-3325-8521-35f18631a9ce.roa
Signing time:             Fri 11 Oct 2024 01:00:31 +0000
ROA not before:           Fri 11 Oct 2024 01:00:31 +0000
ROA not after:            Thu 09 Jan 2025 02:00:31 +0000
asID:                     209242
IP address blocks:        2607:8940:2c40::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:80:26:73:4a:5f:2e:dc:97:da:fb:bc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Oct 11 01:00:31 2024 GMT
            Not After : Jan  9 02:00:31 2025 GMT
        Subject: CN=9bf23db5-e0d3-4ead-8dde-49170e9c99b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:0a:cf:60:ce:bc:14:54:98:e8:60:5a:d2:ac:
                    27:af:01:ca:19:2f:8d:47:f3:8a:97:fe:2d:a2:06:
                    01:29:79:4c:08:9a:7d:a3:2f:04:44:c0:c8:66:48:
                    4a:37:b4:78:6a:ed:be:48:d6:6c:12:f4:7e:60:ef:
                    f5:02:05:ca:29:15:8f:fb:32:77:d7:f5:c8:50:6c:
                    59:bf:25:2a:f7:73:41:10:7c:ba:9e:4b:93:bb:8d:
                    48:f3:4a:da:45:7a:80:e3:e7:24:d9:e7:24:7d:a4:
                    95:a9:a8:15:df:79:76:d0:c7:a2:8f:bc:cf:6c:49:
                    d9:a5:be:15:94:73:09:55:10:06:16:d4:b9:65:26:
                    72:74:12:7e:57:9e:27:1a:b7:21:bc:19:74:97:28:
                    09:73:c7:93:27:80:cc:ac:43:7d:15:58:73:10:96:
                    77:ed:42:83:7c:1e:3a:81:cb:be:a9:d6:76:1b:f5:
                    14:67:b6:2e:9d:d7:57:9a:a3:f3:d0:27:db:62:d2:
                    3f:0b:63:70:27:9a:42:76:a9:05:14:dc:a2:cf:b8:
                    3e:f7:10:b7:15:0a:30:48:8b:a3:5d:5a:b9:a1:68:
                    e0:b7:06:3e:58:64:22:f8:39:3d:82:21:bb:43:23:
                    ba:45:f1:03:0d:d8:cf:d2:92:bc:23:28:8b:1b:e3:
                    05:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:19:B7:22:60:D1:8D:2B:F2:DA:1A:12:DC:9B:B2:A0:1A:61:BA:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/93572255-5953-3325-8521-35f18631a9ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:2c40::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:5a:f0:5b:d7:9f:58:1b:ad:3b:56:a0:e0:7f:21:29:c6:2b:
         a9:ea:f9:4b:1f:1d:7f:e5:4a:c8:96:fd:ec:69:02:c6:bb:83:
         0c:86:65:20:11:44:99:8c:39:06:cc:18:63:e5:9a:30:05:07:
         2d:d0:42:34:40:60:c4:1a:cc:57:a6:af:18:fb:9f:c1:76:10:
         ea:e4:88:90:07:9c:57:8c:0c:19:a3:b6:4b:42:08:a0:c0:04:
         25:3c:1a:90:51:9a:8c:bc:ee:77:da:d6:88:65:67:19:f5:34:
         b5:8e:af:e8:f0:b9:bb:4e:4f:93:06:38:8e:55:05:63:30:de:
         6b:b8:a0:c2:18:3e:95:51:2b:3b:7c:fb:30:bd:5c:4a:b1:ad:
         8f:a3:e7:31:ea:45:c9:3b:2c:29:91:ce:b3:67:c9:17:6b:2b:
         69:c1:2e:d0:08:80:79:aa:bc:fd:dd:3d:b9:41:c4:ad:e7:18:
         f6:3b:4f:87:f8:d6:3a:e9:2b:6d:c2:b5:3c:70:2a:4a:37:3a:
         50:5e:af:20:35:87:1b:98:b8:80:d3:b3:2c:70:d6:6b:e2:c6:
         99:8e:44:9c:ec:29:6a:4e:d5:eb:5d:38:6f:8a:ec:52:f5:e8:
         f8:0c:f8:f7:52:16:4b:ef:34:06:f2:26:7a:a3:32:8b:53:b4:
         f4:1d:c3:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:36:21 2024 by rpki-client on console-ams.rpki-client.org